VULNERABILITY INTELLIGENCE
CVE-2010-0646
CVSS score10 NONE
EPSS probability5.12%
CISA KEVNot currently listed
Published2010-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Weakness classification
- nvd@nist.gov: CWE-189
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Patch
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org